This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: lNka+gYGygafJ15Uluxfg8l7MdjDcNS+Y/U/0Tu0G4E= Subject key identifier: 36:B6:58:8C:D9:F8:3F:38:E4:84:94:E6:A0:3A:23:FB:B0:87:7A:AB Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 2A5181BC14A3F351726B7EB87AD52523D46C8908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 03B0 Signing time: Wed 17 Dec 2025 22:31:17 +0000 Manifest this update: Wed 17 Dec 2025 22:26:17 +0000 Manifest next update: Sun 21 Dec 2025 03:18:17 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: f/g+vvxnz4MtqE7Nn9NsJ+ZYSADgt0pRQtzMfsvaI6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:51:81:bc:14:a3:f3:51:72:6b:7e:b8:7a:d5:25:23:d4:6c:89:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Dec 17 22:26:17 2025 GMT Not After : Dec 21 03:18:17 2025 GMT Subject: CN=36B6588CD9F83F38E48494E6A03A23FBB0877AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:d6:be:02:3a:2c:f6:18:d6:22:7d:77:6a: e8:f7:e3:1f:75:e8:04:c2:b2:56:4b:9c:bd:80:10: df:ae:75:a9:1c:97:02:de:93:2e:8c:19:ae:12:1c: 60:58:29:4d:c2:e3:42:79:3f:df:c1:ab:b1:86:04: fc:0e:3d:22:4a:ce:43:18:a2:03:c4:b1:d8:91:7f: ba:c9:dd:d0:55:dd:cf:15:76:bb:73:6d:62:2f:e8: 00:bd:e4:6c:12:df:72:e8:ee:ba:05:00:8e:33:94: af:2c:e3:67:3d:f9:40:d6:9b:d1:d0:8e:52:91:7d: f3:6b:57:09:31:e0:86:b9:b0:aa:29:fd:08:6c:82: 43:0a:2a:b0:a2:4d:2b:b5:d6:f3:29:1e:da:28:83: 71:6f:6d:b3:a7:c4:38:1a:a8:e1:22:07:53:5a:57: 89:1a:dd:c4:b2:46:80:8c:96:48:51:36:a2:de:8d: c1:05:54:8b:7d:04:03:6c:a0:60:aa:f7:7a:a7:57: a3:e4:09:86:53:78:92:5d:a1:ae:e8:4b:08:30:8e: ed:81:ba:36:cd:25:6e:a9:8a:71:f5:1c:6e:03:b5: 75:16:bc:fb:e6:ca:98:cd:ff:da:07:a1:0e:25:c0: 0f:24:3b:ab:1a:b2:f7:11:67:d5:17:57:d5:9c:0b: ed:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B6:58:8C:D9:F8:3F:38:E4:84:94:E6:A0:3A:23:FB:B0:87:7A:AB X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2f:62:aa:46:f4:68:78:23:e1:65:43:19:76:84:61:2c:d1: 5b:06:8e:5f:50:5c:ae:c0:60:54:22:17:e8:49:26:4d:f2:27: 40:24:ed:f2:eb:05:94:2c:7b:6a:d5:6f:99:ef:58:38:98:c8: 3a:fa:83:2f:12:53:82:a7:83:dd:30:89:31:40:06:d4:6b:02: 00:f9:76:f8:1c:80:25:a9:64:52:04:05:10:ae:9e:f7:27:65: c4:fe:d9:ce:89:b3:e7:3f:4e:ba:89:fa:02:6f:3a:83:c1:5d: 17:a1:c4:50:df:83:a4:5b:02:c8:9c:76:85:b1:6b:17:fe:7f: 1b:f4:fb:7b:1d:bf:1a:92:55:0e:6f:65:77:e2:43:56:b9:e7: ab:d5:77:08:59:de:b4:14:c1:92:17:0e:7d:a1:a8:3c:4d:ee: 47:8a:c2:ba:a1:ee:c5:8f:35:30:54:33:da:03:6f:ba:5f:c0: 3c:c1:4a:7e:a1:1c:35:2a:19:d2:fb:e4:e7:18:1e:a4:79:04: 06:f2:57:ff:c6:bf:0f:9b:30:88:e5:35:d9:42:41:99:91:31: cd:d6:70:a8:47:4f:25:46:b9:88:a7:fa:60:ab:39:d2:96:5b: c3:c4:ea:5a:d6:ed:ee:66:58:04:aa:7e:e9:07:53:ea:76:0e: b4:88:6b:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlGBvBSj81Fya364etUlI9RsiQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTEyMTcyMjI2MTdaFw0yNTEyMjEwMzE4MTdaMDMxMTAvBgNV BAMTKDM2QjY1ODhDRDlGODNGMzhFNDg0OTRFNkEwM0EyM0ZCQjA4NzdBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDNa+Ajos9hjWIn13auj34x91 6ATCslZLnL2AEN+udakclwLeky6MGa4SHGBYKU3C40J5P9/Bq7GGBPwOPSJKzkMY ogPEsdiRf7rJ3dBV3c8VdrtzbWIv6AC95GwS33Lo7roFAI4zlK8s42c9+UDWm9HQ jlKRffNrVwkx4Ia5sKop/QhsgkMKKrCiTSu11vMpHtoog3FvbbOnxDgaqOEiB1Na V4ka3cSyRoCMlkhRNqLejcEFVIt9BANsoGCq93qnV6PkCYZTeJJdoa7oSwgwju2B ujbNJW6pinH1HG4DtXUWvPvmypjN/9oHoQ4lwA8kO6sasvcRZ9UXV9WcC+25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNrZYjNn4PzjkhJTmoDoj+7CHeqswHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQvYqpG9Gh4I+FlQxl2hGEs0VsGjl9QXK7A YFQiF+hJJk3yJ0Ak7fLrBZQse2rVb5nvWDiYyDr6gy8SU4Kng90wiTFABtRrAgD5 dvgcgCWpZFIEBRCunvcnZcT+2c6Js+c/TrqJ+gJvOoPBXRehxFDfg6RbAsicdoWx axf+fxv0+3sdvxqSVQ5vZXfiQ1a556vVdwhZ3rQUwZIXDn2hqDxN7keKwrqh7sWP NTBUM9oDb7pfwDzBSn6hHDUqGdL75OcYHqR5BAbyV//Gvw+bMIjlNdlCQZmRMc3W cKhHTyVGuYin+mCrOdKWW8PE6lrW7e5mWASqfukHU+p2DrSIaxM= -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:41 2025 by rpki-client